If I block a port in the Windows Firewall, and then attempt a connection to that port from another PC, what should I expect to see in Wireshark?
When running wireshark at the destination machine ('server' for lack of a better term), should I see:
- No inbound or outbound connections (which is what I would expect with a hardware firewall)
- An inbound connection attempt, but no outbound
At the moment I'm seeing #2 - I can see the inbound connection attempt, but I never see any response from the machine.
Should this be the expected behaviour?